diff --git a/HISTORY.md b/HISTORY.md
index 436db47..2ca51dc 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,3 +1,8 @@
+unreleased
+===================
+
+  * deps: basic-auth@^2.0.1
+
 1.10.0 / 2020-03-20
 ===================
 
diff --git a/package.json b/package.json
index 201c2ff..c98dfa0 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
   ],
   "repository": "expressjs/morgan",
   "dependencies": {
-    "basic-auth": "~2.0.1",
+    "basic-auth": "^2.0.1",
     "debug": "2.6.9",
     "depd": "~2.0.0",
     "on-finished": "~2.3.0",